https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-48382.htmlhttps://patchthecve.com/cve/CVE-2023-48382.htmlWed, 17 Jun 2026 06:34:08 +0000MEDIUM 6.5: Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a mail deliver-related URL. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access ahttps://patchthecve.com/cve/CVE-2023-48381.htmlhttps://patchthecve.com/cve/CVE-2023-48381.htmlWed, 17 Jun 2026 06:34:08 +0000MEDIUM 6.5: Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a special URL. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify parhttps://patchthecve.com/cve/CVE-2023-48380.htmlhttps://patchthecve.com/cve/CVE-2023-48380.htmlWed, 17 Jun 2026 06:34:08 +0000HIGH 7.4: Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulahttps://patchthecve.com/cve/CVE-2023-48379.htmlhttps://patchthecve.com/cve/CVE-2023-48379.htmlWed, 17 Jun 2026 06:34:08 +0000MEDIUM 5.3: Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response.https://patchthecve.com/cve/CVE-2023-48378.htmlhttps://patchthecve.com/cve/CVE-2023-48378.htmlWed, 17 Jun 2026 06:34:08 +0000HIGH 7.5: Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.